first commit

.gitignore

@@ -0,0 +1,23 @@
+# Terraform state, plans, and provider/plugin caches
+**/.terraform/
+*.tfstate
+*.tfstate.*
+*.tfplan
+crash.log
+crash.*.log
+.terraform.lock.hcl
+
+# Ansible artifacts and local secrets
+*.retry
+*.vault-password
+ansible/inventory/*.ini
+ansible/inventory/*.yml
+*.key
+*.pem
+
+# Local tooling and generated demo output
+.DS_Store
+.env
+tmp/
+artifacts/
+